^ START J 



Q START ^ 



RECHVE " 
CODE, ACNST1 ^ 






GENERATE P - 







70 



72 X 



.74 








GENERATE 
ACNSTl, 
ACNST2 






SEND CODE, 

ACNST1TO 
SENDER 






SEND CODE, 
ACNST1, ACNST2 f 
TO RECIPIENT 







START 



60 



62 / 

/ / 



/ 
/ 



80 



RECHVE 



^ CODE, ACNSTl, 



RECEIVE P 
FROM SENDER 



^ EXIT J 



64 



^ EXIT ^) 



50 



SECURE 
CHANNEL 




82 



FIG. 2 



• 



F04 



doff 



START ^ 



GENERATE 
IV1 



GENERATE AK 
= HJV1 |P) 



.90 



.92 



94 



START ^ 



START 



/ 



/ 



/ 



100 



RECEIVE (I vi, 

A AS) FROM 
/f SENDER 



/ 



GENERATE AS 

— E(ACNST1, AK) 



/ 



/ 



/ 



/ 



SEND (I VI, AS) 
TO SERVER 



/ 



/ 



/ 
96 



^ EXIT ^ 



138 



EXIT TO 
ERROR 
ROUTINE 



130 



N 



GENERATE 
IV2 



SEND (IV1, IV2) 
TO RECIPIENT 



102 



/ 

/ 

/ 

/ ^104 



/ 



/ 



/ 



/ 



128 



RECEIVE 

(IV3, AR) FROM 
RECIPIENT 



GENERATE 
ARK=HiV2| 

IV3| AS) 



GENERATE 
D(AR, ARK) 



\ 

\ 

\ 

\ 

\ 

132 \ 



\ 








RECEIVE 

f (I VI, IV2)FROM 
SERVER 






GENERATE 
HJV1,P) = AK 






GENERATE 

E(ACNST1, AK) = 
AS 






GENERATE 
IV3 






GENERATE 
ARK=I<IV2| 

IV3 | AS) 






GENERATE AR 

= E(ACNST2, ARK) 






v SEND(IV3,AR) 
TO SERVER 







140 



^ EXIT ^) 



108 



110 



112 



AUl HHNTICATE 
RECIPIENT 



144 



STORE RECIPIENT 
AUTHENTICATION 



116 



.118 



.120 



T24 



EXIT ^) 



FIG* 3 



^ START ^ 



GENE 

n 


RATE 
/4 






GENERATE PK 
= H?V4|P) 






GENERATE 
MESSAGE HASH • 
H(M) 






GENERATE ENC - 
E(M |H(M),PK) 






SE 
(IV4, 
TOSE 


ENC) 
RVER 



152 



154 



156 



160 



162 



FH4 



Q START 



RECEIVE 
(IV4, ENC) 




170 



171 



^ START J 



RECEIVE 
(IV4, ENC) 



RECIPIENT 
OK? 



GENERATE 
H;iV4|P)-PK 



SEND 
(1V4, ENC) 
TO RECIPIENT 



-172 



TO ERROR 
ROUTINE 




EXIT 



192 



^ EXIT ^ 



GENERATE 
D(ENC,PK)-M IH(M) 



CALCULATE 
MESSAGE HASH FROM 
RECEIVED MESSAGE 



^ EXIT J 



180 



^182 



184 



186 




FIG. 4 



START J 



FI34 SoPs 



206 



SET 

d = 0,j = 0 



CHUNKm to 

FORM 
k(0), k(l),...k(t) 



FORMk(t+l) = 
bit length of M 



CALCULATE 
d = E(d,k(D) 



210 




200 



202 



204 



SETj=j+l 



>12 



^ EXIT ^ 



FIG. 5 



